Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Security company touts new approach on insider threat

By Cara Garretson , Network World , 12/12/2005

Oakley Networks, which has been selling its technology for information-leakage detection and prevention to government agencies for five years, plans to release this week a product that also can be used by non-government entities.

The product, SureView, takes what the company says is a new approach to blocking insider threats by working at the application-event level, such as when a file is printed or saved. That differs from other companies' products that work at the network level.

SureView, which consists of a tamperproof appliance and agents deployed on desktops, is designed to prevent sensitive or proprietary information leaks through real-time monitoring of end-user activity and collecting event data from applications, says Oakley Networks' CEO Derek Smith.

Those applications include e-mail, Web mail, instant messaging, VoIP programs, browsers, Microsoft Office products, as well as information saved on USB storage devices, CDs and DVDs, or data that is printed or encrypted, he says.

Vital stats:
Oakley Networks

Headquarters: Salt Lake City
Employees: 125
Founded: 2001
CEO: Derek Smith
Finances: Privately held; investors include Kleiner, Perkins, Caufield & Buyers
Competitors: Vontu, Vericept
Click to see:

Event data fed to SureView is analyzed against policies, both predefined and those set by an enterprise, to flag any violations. For example, if an employee in the finance department normally works Monday through Friday from 9 a.m. until 5 p.m. unexpectedly comes in on a Sunday morning and starts printing documents, that would likely be a policy violation, Smith says.

If a breach is encountered, SureView sets off alarms; administrators can use the SurePlay feature that offers a "videolike view" into user activities, including keystrokes, mouse movements, documents opened and Web sites visited.

SureView's agents also let administrators monitor and analyze data before it is encrypted, or hidden, protecting enterprises from an insider's intent to pass sensitive information outside the company network, Smith says.

Oakley has decided to enter the commercial market because of the heightened awareness over the past year among enterprises to insider threats, Smith says. "We think there's really been a mind shift on the part of corporate America that they need to get out in front of this problem," he says.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask to prospective vendors to get the right endpoint solution.

Download the white paper.

Unauthorized applications: Taking back control

Employees installing and using unauthorized applications like IM, VoIP, games and peer-to-peer file-sharing applications cause many businesses serious concern. How do you control these applications?

Download the white paper.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.